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Memorandum of Understanding for 
S2I4 HMCs 



All redacted 
information exempt 
under (b)(1) and (b) 
(3) except as 
otherwise noted. 



Guidelines Governing Access and Queries of Data Residing in 

Business Records FISA 



I, , acknowledge that I understand the following 

guidelines regarding use of the Business Records FISA. If I encounter any situations that 
require clarification of additional guidance I will immediately contact the S2I4 Division 
Management or the Operations Chief. 

Background: The Foreign Intelligence Surveillance Court (FISC) 2 March 2009 ruling 
concerning NS A use and access of BRFISA data in the pursuit of terrorist connections 
has resulted in heightened scrutiny of the analytic process. Individuals granted access to 
BRFISA data must, at present, be qualified to perform HMC functions and comply with 
the guidelines outlined below. All selectors labeled RAS approved have been subjected to 
a review and justification process through DOJ and the FISC. Only RAf^electors 
approved by the Court can be considered for chaining and analysis in 

The following guidelines apply for access & use of BRF data in light of the FISC ruling: 

1 . Any selector used to query this database must be RAS-Approved based on 

justifications provided to the FISC after March 4 2009. The Emphatic Access 
Restriction (EAR) shoul^revent any HMC/Analyst from chaining a non-RAS 
approved selector Immediately inform S2I4 management, Chief 

of Ops and Division TD is you note an event where the EAR appears to be 
inoperable. Document the event to the best of your ability. 

2. Each HMC/ analyst must take great care to ensure that the numbers entered into a 
query are accurate and reflect the actual number string in the SV provided 
spreadsheet as RAS approved by the court. 

3 . The HMC/analyst must immediately report any errors or anomalies made in the 
query process to S2I41 Branch and S2I4 Division Management. 

4. While NSA is authorized to chain 3 hops out from a RAS approved selector, S2I4 
HMCs and analysts will limit their chaining to 2 hops out until provided 
additional guidance. 

5. Until a more formal process is established by ADET and SV4, S2I4 Operations 

Chief and/or Operations Coordinator will administer an oral competency 
evaluation to ensure guidelines and legal constraints with regards to RAS are 
understood before an individual is provided access to BR FISA data. SV will 
observe and record the date and results of that evaluation. 

6. Technica l snlntinn^^^^gyyit in place to segregate data 

chaining architecture is designed around many, 
separate realms or repositories of metadata. Homeland analvstfujoutinelv have 
had access to four metadata repositories. They are SIG1NT,^^^^^^H, 
BRFISA and PR/TT. Homeland analysts have had the abilit^mmoos^ill 
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metadata repositori es or various combinations of the four. When performing 
contact chaining the analyst must be aware of the date ranges 

associated with each metadata realms. This knowledge is necessa^ri^mdcgtand 
the potentia l source of the information being displayed in the^B^SlIssBI 
tool as the metadata from each realm is fused together at the display 
output in The knowledg^f the date ranges for each realm is not 

identified to the use r by the the user needs to know this prior to 

using the ^^^^|tool. The date ranges for the four data realms are: 



& 

& 

» BRFISA to present day 

PR/TT = ^^Hto present day 

Effective March 18th, 2009, has cut off all access to the! 

metadata realm and all accesses/permissions to this metadata realm ha^eer^^^ 

revoked. 

When an HMC opens ^^^^B turns on the 'FISABR' permission, sets the date 
range to "All" and performs a contact chain on a RAS-Approved seed selector. 
They will be provided metadata from the SIGINT realm between Mid- 1998 to 
present and they will be provided metadata from the BRFISA realm between 24 
May 2006 to present. 

7. Each HMC/analyst must document their findings associated with queries on Court 
approved RAS approved selectors to indicate: 
assessed value of contacts 

data that prompts subsequent reporting or lead information for LE 
counterparts 

additional lead data/seed information for the SIGINT system 
The compilation of those findings will determine the breadth of additional 
queries. 




Chief, S2I4/HSAC 



Signature/Date 
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